I think we only have a "email or hash" validator, not a "well-formed hash" validator so I'd probably keep this.